Roles that scale with your team
Grant access to named resources or use dynamic rules by type and tag. Bring new infrastructure into the same access model.
Users / Roles / Dynamic rules
A SECURITY STARTUP / ZERO-TRUST ACCESS
maraccessGive access.
Keep control.
Your servers, clusters, and databases.
One access platform. Every session accounted for.
A startup building for infrastructure teamsRole-based access / Time-bound approvals / Session visibility
ONE PLATFORM. YOUR STACK.
SSHRDPKubernetesPostgreSQLMySQLRedisMariaDBSQL Server
01 / THE PLATFORM
Infrastructure moves fast.
Access should keep up.
Replace scattered credentials and disconnected access decisions with a shared view of your infrastructure. Give people the resources they need, with the controls your security team expects.
Secrets Vault, backed by AWS
Enable the optional AWS Secrets Manager integration to store your secrets encrypted in AWS Secrets Manager. In this mode, secret values are not stored in the Maraccess control plane. Link vault credentials to compatible resources.
Optional / AWS Secrets Manager / Encrypted storage
A record of every connection
Review sessions, command activity, and RDP recordings. Follow resource, role, and credential changes in the audit log.
Sessions / Recordings / Audit logs
02 / JUST-IN-TIME ACCESS
The right access.
For the right amount
of time.
Make privileged access a deliberate decision. Set approval requirements, capture a justification, and define when the access window ends.
Talk through your access model →ACCESS REQUESTSample data
Production database
orders-db / PostgreSQL
- Requested by
- morgan@acme.com
- Duration
- 4 hours
- Reason
- Investigate incident #4021
- 1Request submittedResource and access window selectedComplete
- 2Owner approvalReviewed by jane@acme.comApproved
- 3Time-bound accessAccess expires after the approved window4 hours
03 / INSIDE MARACCESS
From request to connection.
See the whole workflow.
A product walkthrough with sample resources, approvals, and session activity.
Step 1 of 7
Simulated walkthrough with sample data — not a live connection to app.maraccess.com.
04 / CONNECTED BY DESIGN
Your identity. Your tools.
One connected workflow.
Bring access into the tools your team already uses, from company sign-in to notifications in Slack.
Slack
Keep access and infrastructure events visible in your team's Slack channels.
Explore sample alerts →Microsoft Entra ID
Use your existing company identity for single sign-on and SCIM user provisioning.
Try the SSO demo →Google Workspace
Let your team sign in with their work identity and keep the sign-in experience familiar.
See the sign-in flow →SCIM provisioning
Connect user provisioning through Entra ID. SSO handles sign-in; SCIM keeps user identities in sync.
Discuss your setup →SLACK / EVENT VISIBILITYLess switching tabs.
Less switching tabs.
More staying in the loop.
Bring important access events into a shared channel so your team can follow what's happening around your infrastructure.
- Access request notifications
- Access and infrastructure event updates
- A shared view for your team
Illustrative demo with sample data. Notification content depends on your configuration.
See Slack in a live demo →SSO + SCIM / BETTER TOGETHEROne work identity.
One work identity.
A familiar way in.
Sign in through Microsoft Entra ID or Google Workspace. Connect Entra ID provisioning with SCIM to manage users alongside your existing identity workflows.
SSO
Your identity provider handles sign-in.
SCIM
Your identity provider synchronizes users.
Interactive illustration. No credentials required and no live sign-in takes place.
M maraccess
Welcome to your workspace
Use your work identity to continue.
Your company identity. Your existing sign-in policies.
You're signed in
ML
Morgan Leemorgan@example.com
Sample userYour workspace is ready. Resource access is governed by your assigned roles.
RESOURCE API / AUTOMATIONYour infrastructure.
Your infrastructure.
Your workflows. Your API.
Use the Resource API to manage infrastructure resources alongside your existing tools. Explore a sample request and response below.
- Resource management through the API
- Bearer token authentication
- Structured JSON responses
Illustrative API example with sample data. No request is sent.
Discuss API integration →REQUEST
# Example request
curl "https://your-workspace.example/api/resources" \
-H "Authorization: Bearer <YOUR_API_TOKEN>"EXAMPLE RESPONSE200 OK
{
"resources": [
{
"id": "demo-resource-01",
"name": "orders-db",
"resourceType": "postgresql",
"hostname": "orders.internal.example",
"port": 5432
}
]
}Illustrative response; fields depend on your API version.
SECRETS VAULT / AWS SECRETS MANAGERCredentials, organized.
Credentials, organized.
Access, under control.
Keep credentials in one place and link them to compatible resources. Enable the optional AWS Secrets Manager integration for encrypted secret storage in AWS.
With the AWS integration enabled, secret values are stored in AWS Secrets Manager, not in the Maraccess control plane.
Illustrative vault screen. All entries are fictional and no secret values are displayed.
Explore Secrets Vault in a demo →Secrets Vault
Credentials for your infrastructure
aws
AWS Secrets ManagerOptional storage integration
Enabled in demoproduction / databasePostgreSQL · orders-db
Passwordproduction / sshSSH · application-server
Private keystaging / databaseMySQL · staging-db
PasswordSELECTED CREDENTIAL
production / database
- Username
- demo_service_user
- Secret value
- ••••••••••••••••
- Linked resource
- orders-db
- Storage
- AWS Secrets Manager
Secret value hidden in this preview
05 / SECURITY AT THE CORE
Confidence in every connection.
Organization-wide MFA
Enforce multi-factor authentication across your organization.
Centralized credentials
Control resource credentials through the vault and gateway.
Session visibility
Review RDP recordings and command-level activity.
Searchable audit history
Trace logins, access requests, role changes, and connections.
If you find any security-related issue, feel free to contact us at security@maraccess.com.
06 / PRICING
Start small.
Scale with your team.
Start with our free Starter plan.
Business and Enterprise are coming soon.
Starter
Free
Up to 5 users
- Supported infrastructure resources
- Role-based access control
- Organization-wide MFA
- 30-day audit retention
Business
FOR GROWING TEAMSComing soon
For growing teams
- Everything in Starter
- SSO + SCIM provisioning
- Session recording
- Dynamic role rules
- Exportable audit history
Enterprise
Coming soon
For larger organizations
- Everything in Business
- Dedicated onboarding
- Dedicated support
- Custom SLAs and deployment options
Put maraccess to work on your infrastructure.
Apply for the pilot →Join the pilot program for up to 30 days.
07 / GOOD QUESTIONS
A few things
to know.
Where are my secrets stored?
When you enable the optional AWS Secrets Manager integration for Secrets Vault, secret values are stored encrypted in AWS Secrets Manager, not in the Maraccess control plane.
Is Maraccess a startup?
Yes. Maraccess is a security startup building privileged infrastructure access with early adopters. Join our pilot program and work directly with the team.
Which systems can I connect?
SSH, RDP, Kubernetes, PostgreSQL, MySQL, MariaDB, Redis, and SQL Server resources are supported in the application interface.
How does access approval work?
A request includes a resource, a justification, and an access window. Workflows define requesters, approvers, and the number of approvals required.
Can I use our existing identity provider?
Microsoft Entra ID and Google Workspace sign-in are available. Entra ID also supports SCIM provisioning.
Can we try it on our infrastructure?
Maraccess is a security startup working with early adopters. Apply for the pilot program for up to 30 days and work directly with the team to explore your resources, roles, and access requirements.
Is the walkthrough a live environment?
The walkthrough uses simulated sessions and sample data. Book a demo to discuss a live walkthrough for your team.
LET'S TALK ACCESS
Better access.
Starts with a
conversation.
Tell us what you're looking to secure. We'll walk through resources, roles, and workflows with your team.
YOUR NEXT STEP
See maraccess in action.
A demo for your team, or a pilot on your infrastructure.
Prefer email? Contact our team
YOUR INFRASTRUCTURE. YOUR ACCESS MODEL.Explore maraccess with a demo or a 30-day pilot.